By 
The Twitter account of American cybersecurity firm and Google subsidiary Mandiant was hacked to impersonate the Phantom crypto wallet and share a cryptocurrency scam.
After gaining control, the attacker renamed it to @phantomsolw and promoted a fake website impersonating the Phantom crypto wallet and promising to distribute free $PHNTM tokens as part of an airdrop.
The users who click the 'Claim Aidrop' button and don't have the Phantom wallet installed will get redirected to the legitimate site where they're prompted to install it.
Once installed, it will try to automatically drain the targets' cryptocurrency wallets. Now the Phantom Wallet warns that the scammers' website is part of a phishing attack.
According to the warning, Phantom believes this website is malicious and unsafe to use. They have disabled the ability to interact with it in order to protect the user funds.
The threat actor behind this attack has since deleted the scam tweet and is now using it to troll Mandiant, saying, "Sorry, change password please." and "Check bookmarks when you get account back."
Mandiant's original Twitter handle, @mandiant, displayed a "This account doesn't exist. Try searching for another." error message.
As of now, Mandiant have regained control of the account on X and are currently working on restoring it.
Image Credit : Dark Reading
